OpenSSF Day

Stephen is a Black engineering director and leader in open source communities.

He is Cisco’s first Head of Open Source, within the Emerging Technologies & Incubation division.

For Kubernetes, he has co-founded transformational elements of the project, including the KEP (Kubernetes Enhancements Proposal) process, the Release Engineering subproject, and Working Group Naming. Stephen has also previously served as a chair for both SIG PM and SIG Azure.

He continues his work in Kubernetes as a Chair for SIG Release, a Lead for WG Naming, and an owner of Enhancements subproject.

Across the wider CNCF (Cloud Native Computing Foundation) ecosystem, Stephen has the pleasure of being one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference, a SIG Contributor Strategy Chair, and a maintainer for the Dex project.

He is a prolific contributor to CNCF projects, amongst the top 25 (as of writing) code/content committers, all-time.

In 2020, Stephen co-founded the Inclusive Naming Initiative, a cross-industry group dedicated to helping projects and companies make consistent, responsible choices to remove harmful language across codebases, standards, and documentation. He leads multiple workstreams here and maintains the initiative’s infrastructure.

He has previously held positions at VMWare (via Heptio), Red Hat, and CoreOS.

Stephen is based in New York City.

Brian has served most recently as General Manager and CTO of the Open Source Security Foundation (OpenSSF), has served as Executive Director of Hyperledger, and formerly as CTO of the World Economic Forum. He currently serves on the boards of the Electronic Frontier Foundation (EFF) since 2013, the Mozilla Foundation since 2003, and the Filecoin Foundation since 2021.

Anne leads program development in Google’s Open Source Programs Office (OSPO). The Program Development Team helps teams at Alphabet develop, contribute to, and release open source software with an eye towards strategy, sustainability, and the spirit of the Open Source Definition. The Program Development Team works across domains, from cloud to data analytics to gaming to security.

Bob is the tech lead & manager of the supply chain integrity group in Google’s Open Source Security Team. He and his team directly contribute to critical OSS secure software supply chain projects (including sigstore that he co-founded), as well as help drive adoption of best practices throughout the broader open source ecosystem.

Rao Lakkakula is Senior Director of Security Engineering at JPMorgan Chase with focus on developer security. Rao has 20+ years of expertise in security and software development with roles spanning from strategy, engineering, risk management, and business intelligence. His prior experience includes security leadership positions in Bayer, Amazon, and various startups. He also serves on the Board of Open-Source Security Foundation (OpenSSF).

Dan Lorenc is co-founder and CEO of Chainguard, a leading software supply chain security company. He started projects like Minikube, Skaffold, and Kaniko to make containers easy and fun, then got so worried about the state of OSS supply-chains he helped found the Tekton and Sigstore projects to make it easier to build and use containers securely; as well as SLSA to create a common language for software security and supply chain integrity.

Dr. David A. Wheeler is an expert on open source software (OSS) and on developing secure software. His works on developing secure software include “Secure Programming HOWTO”, the Open Source Security Foundation (OpenSSF) Secure Software Development Fundamentals Courses, and “Fully Countering Trusting Trust through Diverse Double-Compiling (DDC)”. He is the Director of Open Source Supply Chain Security at the Linux Foundation and teaches a graduate course in developing secure software at George Mason University (GMU). Dr. Wheeler has a PhD in Information Technology, a Master’s in Computer Science, a certificate in Information Security, a certificate in Software Engineering, and a B.S. in Electronics Engineering, all from George Mason University (GMU). He is a Certified Information Systems Security Professional (CISSP) and Senior Member of the Institute of Electrical and Electronics Engineers (IEEE). He lives in Northern Virginia.